If the 403 error page is set in /admin/config/system/site-information , then the canonical link for the profile page is the 403 error page. Also, the meta page title of the 403 page is used. The HTTP response code, however is still 200.

For example: I am using the customerror module. The 403 page is set to /customerror/403 . The page title for /myprofile , /myprofile/register and /myprofile/password is "Access Denied". I tested with the anonymous user.